Every number, proven — not promised.
Ask a finance question in plain English. Get the answer with the evidence it’s right: the executed SQL, an independent runtime verdict, and a signed receipt your auditors verify offline. A confidently wrong number is worse than no number — so we prove every one.
The whole pitch, in four beats
The third beat is the one that sells it: a wrong number, caught by name, before anyone acts on it.
Finance already has chatbots. It doesn’t have trust.
Today’s assistants prove themselves offline — “95% accurate on a benchmark.” In a regulated report that means 5% is wrong and you don’t know which 5%, and the cost of that 5% is a restatement or an audit finding — not a shrug. So finance either distrusts the tool or pays an analyst to re-check every number, which kills self-service. Tessera removes the blocker: it proves each answer, at runtime.
Not a better chatbot — the trust layer underneath it
| Generic copilot | Text-to-SQL assistant | Tessera | |
|---|---|---|---|
| Runs real SQL on governed data | no | yes | yes |
| Proves this answer correct, at runtime | no | offline only | yes — per answer |
| Catches named finance mistakes | no | no | 8 failure classes |
| Auditor-verifiable evidence | no | no | signed receipt |
| Fails honest (no number vs. a wrong one) | no | partial | WARN, never fabricates |
| Runs fully air-gapped | rarely | rarely | yes |
Ask → verify independently → attest
Ask
Your question resolves to a certified metric and runs as parameterized, read-only SQL — never string-built, never free-form.
Verify — independently
A separate engine re-derives the answer and checks it against the named ways a ledger number goes wrong. Re-running the model’s own SQL would be circular; this never does.
Attest
The verdict, SQL and answer are bound into an Ed25519 receipt. Anyone re-checks it offline — they trust the receipt, not the assistant.
Verified trust, at a lower bill
The verifier makes “cheap model first” safe — so you only pay for the expensive model on the questions that actually need it.
Ask the real system
This talks to the live verifier. Toggle the cost cascade and a signed receipt; open the evidence drawer and verify the receipt yourself.
See the proof for yourself.
Open-source, deploy-anywhere, and every answer carries its own evidence.